@orangecheck/legal 0.2.1 → 0.4.0

package/dist/index.mjs

@@ -1182,7 +1182,7 @@ var terms3 = {
   title: "Terms of service",
   description: "The terms governing your use of OC Vault \u2014 an end-to-end-encrypted secrets vault. Client-side encryption; OrangeCheck stores ciphertext only and cannot read your data.",
   metaTitle: "Terms of Service \u2014 OC Vault",
-  metaDescription: "Terms of service for OC Vault (vault.ochk.io): an end-to-end-encrypted secrets vault. Client-side encryption, Lightning payment, no fund custody.",
+  metaDescription: "Terms of service for OC Vault (vault.ochk.io): an end-to-end-encrypted secrets vault. Client-side encryption, on-chain Bitcoin payment, no fund custody.",
   effective: "2026-05-15",
   updated: "2026-05-15",
   preamble: [
@@ -1222,11 +1222,11 @@ var terms3 = {
     {
       id: "plans-billing",
       heading: "plans, payment & billing",
-      hint: "lightning \xB7 inbound only",
+      hint: "on-chain \xB7 inbound only",
       blocks: [
         {
           kind: "para",
-          text: "OC Vault offers a free tier and paid tiers purchased with Bitcoin over the Lightning Network. OrangeCheck **receives** payment and never sends funds to users; OC Vault holds no custodial balance for you. Cloud sync is granted by the **vault Cloud Annual** (21,000 sats / year) and **vault Cloud Lifetime** (210,000 sats one-time) tiers. All paid tiers are subject to the **service limits** below."
+          text: 'OC Vault offers a free tier and paid tiers purchased with Bitcoin **on-chain**. OrangeCheck **receives** payment and never sends funds to users; OC Vault holds no custodial balance for you. Every paid tier is a **prepaid period** that expires and does not auto-renew \u2014 there is no perpetual or "lifetime" tier, and none is sold. The current tiers, their prices and their period lengths are published at [vault.ochk.io/pricing](https://vault.ochk.io/pricing), which is the authoritative price list; prices are not restated here so that this document cannot contradict it. All paid tiers are subject to the **service limits** below.'
         },
         {
           kind: "stub",
@@ -1241,7 +1241,7 @@ var terms3 = {
       blocks: [
         {
           kind: "para",
-          text: "Every tier \u2014 including the one-time **Lifetime** tier \u2014 is subject to the following service limits. They are deliberately set well above the needs of a personal password vault but bound the storage and bandwidth a single account may consume on the shared infrastructure. The limits are **enforced in code**; exceeding them returns an HTTP 507 (storage) or 429 (rate) response."
+          text: "Every tier is subject to the following service limits. They are deliberately set well above the needs of a personal password vault but bound the storage and bandwidth a single account may consume on the shared infrastructure. The limits are **enforced in code**; exceeding them returns an HTTP 507 (storage) or 429 (rate) response."
         },
         { kind: "subhead", text: "storage" },
         {
@@ -1282,16 +1282,16 @@ var terms3 = {
       ]
     },
     {
-      id: "lifetime",
-      heading: "lifetime entitlements",
+      id: "continuity",
+      heading: "continuity & export",
       blocks: [
         {
           kind: "para",
-          text: "The one-time **Lifetime** tier grants cloud sync for the operational life of OC Vault, subject to the service limits above. The portable export feature is always free and works offline with [`@orangecheck/vault-core`](https://www.npmjs.com/package/@orangecheck/vault-core) \u2014 even if OC Vault is discontinued, you retain a self-decryptable copy of your data."
+          text: "The portable export feature is always free and works offline with [`@orangecheck/vault-core`](https://www.npmjs.com/package/@orangecheck/vault-core) \u2014 even if OC Vault is discontinued, you retain a self-decryptable copy of your data. That guarantee does not depend on any paid tier."
         },
         {
           kind: "stub",
-          text: 'The precise legal meaning of "lifetime" \u2014 including treatment on a change of ownership, the wind-down notice period, and the export / continuity commitments OrangeCheck offers if the Service is discontinued \u2014 is being finalized for publication. This section will be completed following review by counsel.'
+          text: "The wind-down notice period and the continuity commitments OrangeCheck offers if the Service is discontinued are being finalized for publication. This section will be completed following review by counsel."
         }
       ]
     },
@@ -1322,7 +1322,7 @@ var terms3 = {
           items: [
             {
               k: "payment processing",
-              v: "Lightning payments are processed via a self-hosted BTCPay Server; we do not guarantee the availability of the Lightning Network"
+              v: "Bitcoin payments are processed via a self-hosted BTCPay Server; we do not guarantee the availability of the Bitcoin network or of any payment processor"
             },
             {
               k: "storage / hosting",
@@ -1355,7 +1355,7 @@ var terms3 = {
     disputeResolution,
     miscellaneous
   ],
-  summary: "summary: end-to-end encrypted; orangecheck stores ciphertext only and cannot recover your vault. pricing, refund, and lifetime-entitlement terms are being finalized \u2014 see the marked sections."
+  summary: "summary: end-to-end encrypted; orangecheck stores ciphertext only and cannot recover your vault. pricing and refund terms are being finalized \u2014 see the marked sections."
 };
 var privacy3 = {
   kind: "privacy",
@@ -1391,12 +1391,16 @@ var privacy3 = {
             },
             {
               k: "payment records",
-              v: "for paid tiers: the Lightning invoice id, sats paid, tier, and entitlement expiry. No card number, no billing address"
+              v: "for paid tiers: the BTCPay invoice id, sats paid, tier, and entitlement expiry. No card number, no billing address"
             },
             {
               k: "encrypted blobs",
               v: "opaque ciphertext keyed to your identity address \u2014 OrangeCheck cannot decrypt it"
             },
+            {
+              k: "per-item metadata",
+              v: 'one row per stored item, carrying its opaque envelope id and a last-updated timestamp. That means we CAN see how many items you store and when each last changed \u2014 the count is what enforces the per-account item ceiling in the service limits, and the timestamp is what lets a second device know which items to re-sync. We cannot see what any item is: not its contents, not its name, not its type. This entry previously appeared on the "what we cannot see" list, which was wrong.'
+            },
             {
               k: "access tokens",
               v: "for developer / CLI / CI access: an SHA-256 hash of each token, an optional label, the granted scope (read or read-write), creation / last-used / optional expiry timestamps. We never store the token itself \u2014 only its hash."
@@ -1418,7 +1422,6 @@ var privacy3 = {
           items: [
             "The contents of any vault item",
             "The names, titles, or types of your items",
-            "How many items you store or how often you use them",
             "Your vault key or any recovery material",
             "Your access tokens (only the SHA-256 hash is stored)",
             "Which sites the browser extension autofilled on \u2014 origin matching happens locally in your browser"